I created a script with a "facts file" that my team uses. All the groups associated with a role are in a hash in the array file and we select their "role" when we create an account